Lead InfoSec & GRC Strategist — Remote

Great Gray Group.; Georgia; Remoto; USD 120.000 - 150.000; Tempo pieno

Vantaggi offerti da questo lavoro

Health, dental, vision insurance

Life and disability insurance

Well-being stipend

401(k) plan

Descrizione del lavoro

Great Gray Group is seeking a Lead Information Security Analyst to take the helm of governance, risk, and compliance within the Information Security team. You will coordinate audits, develop and enforce security policies, and advance the ISMS program for enterprise resilience.

The role requires 5–10+ years in audit/compliance or technical security, with a strong focus on SOC 2 and NIST frameworks, and the ability to mentor analysts while driving security initiatives across the organization.

Competenze

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• 5-10+ years of audit, compliance, or technical experience.
• Excellent knowledge of IT security control trends as well as auditing & compliance best practices.
• Effective communication skills (written and verbal) to articulate IT controls and compliance issues to leadership.
• Positive attitude and a strong commitment to delivering quality work.
• Relevant training and/or industry certifications in auditing, compliance, or IT security.
• Ability to thrive in a fast-paced, dynamic environment and manage multiple priorities.
• Comfortable navigating ambiguity.
• Entrepreneurial mindset to bring best practice ideas to the team.
• Your standards reflect our core values: Growth Mindset, Disciplined Curiosity, Grit, Results Ownership, Collaboration.

Mansioni

• Lead and manage GRC functions including compliance monitoring, audit management, and risk assessment.
• Ensure compliance with SOC 2, NIST, and industry-specific standards.
• Prepare for and manage compliance audits, assessments, and regulatory reviews.
• Maintain security documentation, evidence, and audit trails for compliance purposes.
• Develop, maintain, and enforce information security policies and procedures.
• Vendor risk management security assessments, onboarding, and reviews.
• Collaborate with cross-functional teams to integrate security into business processes.
• Mentor and support Information Security Analysts in GRC functions.
• Monitor security posture, identify threats, and recommend remediation measures.
• Conduct vulnerability assessments, penetration testing, and security assessments on systems and applications.
• Participate in incident response activities and post-incident analysis.
• Stay current with security trends and evolving compliance requirements.

Conoscenze

GRC expertise

Audit & compliance

Security governance

Regulatory frameworks (SOC 2, NIST)

Policy development

Vendor risk management

Mentoring

Communication skills

Formazione

Bachelor's degree in CS/IT/Cybersecurity

Descrizione del lavoro

Great Gray Group is seeking a Lead Information Security Analyst to take the helm of governance, risk, and compliance within the Information Security team. You will coordinate audits, develop and enforce security policies, and advance the ISMS program for enterprise resilience.

The role requires 5–10+ years in audit/compliance or technical security, with a strong focus on SOC 2 and NIST frameworks, and the ability to mentor analysts while driving security initiatives across the organization.